Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Jul 2000 10:08:45 +0100
From:      David Malone <dwmalone@maths.tcd.ie>
To:        Brad Knowles <blk@skynet.be>
Cc:        cjclark@alum.mit.edu, Vivek Khera <khera@kciLink.com>, freebsd-stable@FreeBSD.ORG
Subject:   Re: fstab mount options
Message-ID:  <20000704100845.B10201@walton.maths.tcd.ie>
In-Reply-To: <v04220800b5874803e615@[195.238.1.121]>; from blk@skynet.be on Tue, Jul 04, 2000 at 09:54:32AM %2B0200
References:  <m266qmc43b.fsf@reader.ptw.com> <14689.1084.894512.504331@onceler.kcilink.com> <v0422082db586be8b6c6b@[195.238.1.121]> <20000703163045.A248@dialin-client.earthlink.net> <v04220800b5874803e615@[195.238.1.121]>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 04, 2000 at 09:54:32AM +0200, Brad Knowles wrote:

> >  From the comment, I would say he has a SCSI Zip drive. The same line
> >  could apply to Jaz, an ancient Bernoull, or the like.

> 	Right, but if he had any other SCSI disks on the system (such as 
> the disk with /, /usr, /var, etc...), wouldn't this also allow them 
> to be mounted & unmounted as desired by the user?

His script only chmoded da0 - which possibly contains /, /usr or /var
but if you're doing this you probably know not to chmod da0 world r/w.

> 	Certainly if you're talking about your own laptop or dedicated 
> desktop machine, the rules can be relaxed somewhat.  However, in 
> general this just seems to be a particularly unsafe practice.  That 
> is, unless I've missed something fundamental?

Yep - you shouldn't be able to use the rest of the SCSI disks unless
you chmod them too - I guess it should be roughly as safe as chmoding
floppy drives to allow people to mount them.

Mind you, it people can mount filesystems they can probably panic
the machine by corrupting the filesystem before it's mounted and
then using it.

	David.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000704100845.B10201>